$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft File: bX2AV2xLO-av9DH40yM49x_fAd0.mft (raw, json) Hash identifier: Os9cjow614ln6YzEnZwj5FdjcN2/2N52fkCfqCRYjaw= Subject key identifier: 7C:96:AD:34:FC:3C:D0:79:64:B0:1E:26:8C:51:30:D6:DC:70:DD:06 Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0EEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft Manifest number: 0EE4 Signing time: Tue 04 Nov 2025 17:43:13 +0000 Manifest this update: Tue 04 Nov 2025 17:43:13 +0000 Manifest next update: Tue 11 Nov 2025 17:43:13 +0000 Files and hashes: 1: bX2AV2xLO-av9DH40yM49x_fAd0.crl (hash: YvNp661yVRKCpTMm7SbWAK3rvn1o4zkN/+9tA+vn2bY=) 2: DA481A0CB61811F0ABB14C31C4F9AE02.roa (hash: T3+CRirqLtz1Ta4crR0HI+okuEb0BcJI1bh/9/iVPTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3822 (0xeee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Nov 4 17:43:13 2025 GMT Not After : Nov 11 17:43:13 2025 GMT Subject: CN=690a3b31-8061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:46:c3:f4:b4:03:75:45:46:7b:73:e4:04:f4: 30:c0:01:61:fa:ae:01:cf:b9:bd:cd:cb:59:59:dc: c5:74:e2:82:e4:56:a6:54:c5:d3:57:76:c4:3c:42: df:7c:d1:54:38:06:d7:de:6f:50:78:15:d8:2f:c6: 44:ee:14:19:87:6d:a4:c7:1c:0f:b9:f0:84:49:ad: 74:4b:8e:a8:54:18:7f:9c:af:50:13:af:22:f5:c5: 25:37:d0:b1:70:de:e0:2b:6f:5d:73:ec:f9:b4:4c: 86:92:13:7c:b1:27:67:8c:94:15:ea:a7:3d:ea:3c: 84:81:7b:a6:b1:b2:04:a0:fd:21:86:33:25:b2:3d: 97:46:89:23:35:07:f8:9d:ac:ed:5c:5c:95:7c:73: d0:b6:dd:73:6f:a8:a5:7c:8a:40:ce:2b:3b:df:c3: a4:2d:ce:db:1a:ab:e9:32:7c:24:01:7c:79:f3:5f: e3:fc:96:94:10:19:81:1f:7a:a0:3c:9f:4f:ad:e3: 36:a7:16:e2:f4:9f:ce:49:97:cb:2a:61:72:8c:9b: 26:dd:9d:d4:71:34:69:c9:52:66:ac:28:c0:68:63: ef:a8:74:db:92:35:17:23:34:dc:f4:92:88:4c:2c: 1b:b8:ed:bb:06:95:ed:6b:53:0f:9c:ba:88:b0:6a: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:96:AD:34:FC:3C:D0:79:64:B0:1E:26:8C:51:30:D6:DC:70:DD:06 X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0e:c1:96:fe:de:0c:df:b1:ac:8e:81:92:fa:bc:ea:7d:55: 12:eb:35:ae:6b:0b:87:53:0c:77:93:89:5d:bc:d0:46:fe:ca: 64:26:e4:6d:eb:6d:27:53:b1:e6:20:0b:ed:00:6f:0f:dc:40: 19:41:da:ef:d8:e4:79:cf:e7:be:aa:f4:45:60:61:87:be:ce: 27:29:16:de:16:6f:4a:06:ef:96:3b:f8:f7:07:74:8e:a0:cf: 64:b3:9e:db:91:d5:fc:dc:15:16:8c:83:6b:29:2a:a9:e3:c2: 8d:9c:8e:6f:c6:c8:bb:3e:77:66:4f:89:e2:dc:16:fe:d8:c7: f0:56:c9:3d:15:a9:98:bf:e5:78:ac:84:43:6d:2a:f7:0d:bb: 7d:d2:98:e4:ed:ad:f6:91:78:dc:de:22:e5:12:8a:cd:bf:fc: 25:cf:30:38:a7:d5:ae:91:6d:59:0b:53:19:13:a6:d3:fc:0c: ca:9a:1c:ca:15:ae:02:0a:c4:4d:0c:53:b8:ed:6c:1a:b0:e0: a8:11:09:76:4a:6c:34:5a:b1:4a:dc:53:21:52:2a:4c:fc:1c: 1b:fa:59:d1:ce:08:1a:dc:a6:89:26:8c:c3:80:0b:f2:1c:e4: 65:1a:41:78:9e:5e:31:2f:37:4c:8e:91:d2:c0:fd:39:98:62: 20:ce:c2:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjUxMTA0MTc0MzEzWhcNMjUxMTExMTc0MzEzWjAYMRYwFAYD VQQDEw02OTBhM2IzMS04MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UbD9LQDdUVGe3PkBPQwwAFh+q4Bz7m9zctZWdzFdOKC5FamVMXTV3bEPELf fNFUOAbX3m9QeBXYL8ZE7hQZh22kxxwPufCESa10S46oVBh/nK9QE68i9cUlN9Cx cN7gK29dc+z5tEyGkhN8sSdnjJQV6qc96jyEgXumsbIEoP0hhjMlsj2XRokjNQf4 naztXFyVfHPQtt1zb6ilfIpAzis738OkLc7bGqvpMnwkAXx581/j/JaUEBmBH3qg PJ9PreM2pxbi9J/OSZfLKmFyjJsm3Z3UcTRpyVJmrCjAaGPvqHTbkjUXIzTc9JKI TCwbuO27BpXta1MPnLqIsGrHpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyWrTT8 PNB5ZLAeJoxRMNbccN0GMB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFCOC9GQkRFOTlGQTkwRkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8t YXY5REg0MHlNNDl4X2ZBZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmDsGW/t4M37GsjoGS+rzqfVUS6zWuawuHUwx3k4ldvNBG/spkJuRt 620nU7HmIAvtAG8P3EAZQdrv2OR5z+e+qvRFYGGHvs4nKRbeFm9KBu+WO/j3B3SO oM9ks57bkdX83BUWjINrKSqp48KNnI5vxsi7PndmT4ni3Bb+2MfwVsk9FamYv+V4 rIRDbSr3Dbt90pjk7a32kXjc3iLlEorNv/wlzzA4p9WukW1ZC1MZE6bT/AzKmhzK Fa4CCsRNDFO47WwasOCoEQl2Smw0WrFK3FMhUipM/Bwb+lnRzgga3KaJJozDgAvy HORlGkF4nl4xLzdMjpHSwP05mGIgzsIi -----END CERTIFICATE-----Generated at Wed Nov 5 07:28:45 2025 by rpki-client